We keep asking this question around the water cooler at work: Why would you pay the ransom instead of recovering from backups? I know that backups are not as common as they should be, but are these cities that pay the ransom really running without any backups?